Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1D7206E24CF11F0825553C2DAE4EC9C.roa
File: D1D7206E24CF11F0825553C2DAE4EC9C.roa (raw, json)
Hash identifier: yNqh57jUtPYMA3+k2IeYDmkoyTw5CfzyacidvdjeVh0=
Subject key identifier: CB:EA:BD:AB:ED:C7:A5:DE:9F:4F:F0:24:1E:72:AB:1D:0C:87:58:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1D7206E24CF11F0825553C2DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 07:59:05 +0000
ROA not before: Tue 29 Apr 2025 07:59:00 +0000
ROA not after: Wed 04 Jun 2025 07:59:00 +0000
asID: 398823
IP address blocks: 154.209.80.0/21 maxlen: 24
154.213.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97471 (0x17cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 07:59:00 2025 GMT
Not After : Jun 4 07:59:00 2025 GMT
Subject: CN=681086c9-f0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:c3:3a:fb:55:f7:26:d0:56:c3:de:01:e9:
03:f1:c9:5a:e3:83:85:dc:04:d8:ce:9a:e1:e2:fe:
f1:fa:27:55:0e:1c:3e:4e:90:c2:10:42:4c:51:05:
da:83:aa:6f:e8:03:d6:38:0b:d9:28:34:d6:5b:e1:
0a:db:a1:2d:76:cf:fc:5b:9b:32:78:1a:0a:a0:a7:
ce:8a:1d:e4:7d:69:3f:6b:ba:9c:fe:37:3e:3d:60:
66:18:50:9d:eb:b0:ce:0a:c5:fd:a9:b9:53:cc:51:
7e:8d:11:6e:6d:59:63:d3:92:10:a2:64:76:6b:35:
84:a1:16:83:cf:6e:33:9d:c9:4d:b4:06:80:59:c5:
6e:4e:a2:1e:1c:f2:4c:5d:7b:38:37:3b:ac:1f:ef:
6b:3f:c2:34:48:28:0a:ad:24:f5:0b:55:92:4b:01:
35:b3:9f:89:ac:ec:6c:6e:10:9f:27:ef:6b:dc:95:
f6:bc:bc:e2:2e:82:f8:e5:f3:21:33:41:ca:72:cc:
c4:2c:8c:20:03:dd:f2:61:bc:77:19:9d:2f:a7:a8:
0a:8f:50:53:95:2f:13:e5:ae:d6:a4:e4:da:3a:ae:
0a:0b:02:36:48:ce:5d:9d:42:9f:30:43:84:87:76:
7b:fe:fd:64:e7:80:d6:0c:b4:54:70:c8:56:af:5b:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:BD:AB:ED:C7:A5:DE:9F:4F:F0:24:1E:72:AB:1D:0C:87:58:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1D7206E24CF11F0825553C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.80.0/21
154.213.168.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:0f:f5:26:d7:7f:4b:34:1e:bb:f3:0b:22:64:51:24:82:cf:
34:d2:5f:1a:52:b5:94:a1:ae:d0:04:d6:fb:87:9e:4f:bb:ab:
8a:1c:28:e0:04:0b:28:3c:27:5d:e1:86:c4:d8:74:1a:ab:cc:
aa:89:a3:94:87:60:3d:ed:51:ec:2b:d4:c5:7f:84:a9:42:82:
2f:99:49:89:ff:7d:91:40:0a:ee:e4:07:2e:69:48:64:77:3d:
a1:e2:ad:b7:de:05:76:52:ed:8f:3e:9f:e7:ac:f8:1f:0c:e2:
65:04:b8:15:1c:03:2b:b2:c4:94:38:d1:c7:7d:da:4d:a7:78:
8c:a8:39:a5:41:bf:e6:b5:86:56:08:7e:a7:dd:05:4f:ec:3e:
7e:a6:1e:51:d5:0d:18:70:fc:bc:7f:54:8c:a3:81:5b:44:6c:
32:e6:be:2f:f8:aa:61:1d:c3:1d:95:d9:7c:6a:86:ca:d5:cd:
12:4b:c9:e0:73:9f:a3:af:3e:24:3e:0c:78:55:70:90:db:b1:
21:94:58:e6:f6:59:fb:00:e6:a8:4b:32:96:46:bb:ad:1b:41:
0e:57:ac:a9:7f:c4:44:64:a4:82:e8:b4:90:46:2e:d4:88:a4:
77:9d:76:5a:95:29:09:7b:53:81:02:4d:a5:33:a2:08:ed:1d:
ff:95:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:53:09 2025 by rpki-client